fix ACL checks for normal proxy method